$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: p8d5Zgfwn+ObvuQboZwkF2Ez/uhwBX1iLjRDvrXq0Zg= Subject key identifier: C2:D5:45:86:A4:14:EC:9D:16:FA:00:BE:03:3D:CB:F9:17:4B:1F:08 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 78DA4A719E379FB52D28BE9954EF0BABDEF747BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 0136 Signing time: Tue 24 Mar 2026 04:12:26 +0000 Manifest this update: Tue 24 Mar 2026 04:07:26 +0000 Manifest next update: Fri 27 Mar 2026 13:58:26 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: Y1BOrojvg2gWcPCN+jfkYJPvP8jr0ZSdYd7It/z3G+I=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: Aa1CIAKAa9rniUhpuaF+1Qn3zV9sEB1p2m7o3WLv1qA=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: keCWY/HyA5TAQamwBAFQ0o5iuI4Y22LQjLkc+XtXxOI=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: VIqb9pZUOIk/h56HmOabKL1kmQSF75KeAohVGz1gmTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:da:4a:71:9e:37:9f:b5:2d:28:be:99:54:ef:0b:ab:de:f7:47:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Mar 24 04:07:26 2026 GMT Not After : Mar 27 13:58:26 2026 GMT Subject: CN=C2D54586A414EC9D16FA00BE033DCBF9174B1F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:c3:e7:be:b2:5c:e0:8c:95:e0:56:26:96: 73:2d:dd:6c:c4:30:ce:47:f4:cb:18:6d:d2:ed:68: 60:3c:b6:dd:6c:48:5e:3d:af:1f:20:8d:20:a5:12: 13:e7:d3:b5:ba:c7:f3:ac:be:e9:1b:ff:6a:8c:5a: 26:f6:d1:cf:58:d3:2b:ae:2c:e9:e5:50:a8:f1:13: e6:15:01:a0:4f:74:aa:a5:e9:fa:53:88:5d:46:77: 59:ac:28:3b:d2:f7:18:5c:f9:8f:f7:33:1d:3c:53: b5:b1:74:77:82:21:04:1d:b5:46:ad:19:2a:d8:44: 66:e1:26:3b:5e:4b:92:2e:e6:a7:dd:28:07:02:3c: b4:bd:98:88:94:da:3e:62:6a:00:61:aa:25:7f:e1: 09:4d:97:2e:5c:93:60:7e:18:c3:29:f5:a0:6d:c6: fd:54:8d:c5:3e:46:65:0b:96:63:b6:64:15:11:fa: 69:67:dd:ac:5f:b7:2e:90:b2:06:37:82:b2:9f:21: 52:ad:32:0a:39:0d:35:5a:fb:76:3a:ae:91:5a:90: bb:be:61:2b:c2:24:5d:96:6d:9b:88:d8:45:c5:3f: 27:6b:8a:90:80:b3:b5:33:d7:07:63:0d:20:3b:e6: 34:49:c9:9d:61:41:ec:7c:0b:06:d2:0e:db:48:ac: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:45:86:A4:14:EC:9D:16:FA:00:BE:03:3D:CB:F9:17:4B:1F:08 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:91:33:89:7d:3e:d2:b5:e0:af:63:59:cb:14:65:98:2f:83: 8b:a7:8d:91:af:e8:39:02:ef:4d:ea:cf:2b:ae:29:ce:79:0e: cb:c5:62:cf:2a:96:80:36:63:9c:13:4f:59:31:5a:c2:ca:c7: 5a:ff:3f:c5:06:23:b9:07:01:12:30:28:78:31:df:37:6b:df: d5:8d:10:64:b5:9a:35:9f:0b:39:2d:a9:f6:1c:f9:a0:7a:4b: c6:f5:73:5c:3c:93:c7:61:5a:0c:2a:bd:10:49:79:dd:39:2d: ac:fd:d5:eb:d4:8d:74:da:0e:84:32:2f:e9:84:1e:ac:e4:7b: b0:c8:bc:0f:7d:0e:eb:eb:a1:71:a4:f2:14:d4:27:e1:19:f1: 99:40:7f:30:77:72:ef:57:15:ef:c9:aa:e8:92:0b:a5:5c:b0: 74:01:28:05:38:ec:b5:4b:34:37:7f:99:b3:2d:0c:ea:e5:90: 55:24:d5:91:52:8d:05:4b:1e:38:8a:0f:65:18:aa:21:7a:0a: 91:fb:95:d0:67:94:a4:94:e8:9a:72:0d:88:e7:7b:c0:8e:5b: 3c:8e:40:26:4e:de:be:28:8b:b7:84:24:58:0a:4d:ad:2f:92: 30:4a:18:70:f9:fe:01:f3:a6:03:2a:84:35:dc:bd:c7:89:61: 02:e5:6f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNpKcZ43n7UtKL6ZVO8Lq973R78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjAzMjQwNDA3MjZaFw0yNjAzMjcxMzU4MjZaMDMxMTAvBgNV BAMTKEMyRDU0NTg2QTQxNEVDOUQxNkZBMDBCRTAzM0RDQkY5MTc0QjFGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCMPnvrJc4IyV4FYmlnMt3WzE MM5H9MsYbdLtaGA8tt1sSF49rx8gjSClEhPn07W6x/Osvukb/2qMWib20c9Y0yuu LOnlUKjxE+YVAaBPdKql6fpTiF1Gd1msKDvS9xhc+Y/3Mx08U7WxdHeCIQQdtUat GSrYRGbhJjteS5Iu5qfdKAcCPLS9mIiU2j5iagBhqiV/4QlNly5ck2B+GMMp9aBt xv1UjcU+RmULlmO2ZBUR+mln3axfty6QsgY3grKfIVKtMgo5DTVa+3Y6rpFakLu+ YSvCJF2WbZuI2EXFPydripCAs7Uz1wdjDSA75jRJyZ1hQex8CwbSDttIrBsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwtVFhqQU7J0W+gC+Az3L+RdLHwgwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFORM4l9PtK14K9jWcsUZZgvg4unjZGv6DkC 703qzyuuKc55DsvFYs8qloA2Y5wTT1kxWsLKx1r/P8UGI7kHARIwKHgx3zdr39WN EGS1mjWfCzktqfYc+aB6S8b1c1w8k8dhWgwqvRBJed05Laz91evUjXTaDoQyL+mE Hqzke7DIvA99DuvroXGk8hTUJ+EZ8ZlAfzB3cu9XFe/JquiSC6VcsHQBKAU47LVL NDd/mbMtDOrlkFUk1ZFSjQVLHjiKD2UYqiF6CpH7ldBnlKSU6JpyDYjne8COWzyO QCZO3r4oi7eEJFgKTa0vkjBKGHD5/gHzpgMqhDXcvceJYQLlb/g= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:03 2026 by rpki-client